Start > Settings > Accounts > Sign– in Options > Find Setup under Windows Hello. If you are a user who has full control/admin rights on their own machine, you can follow these steps to setup Hello:

IT Administrators, see here for configuring your Hello options–including enforcing PIN complexity requirements (which you should do). If there is a key logger present on your system, for example, the attacker may learn your PIN, but they will not be able to do anything with it, without the actual, physical device in their possession. Therefore, a remote attacker cannot leverage your Hello to gain access to any of your information. No password is being stored or transmitted to any remote servers in Hello, so there is no possibility of intercepting it in transit, etc. If for some reason the fingerprint read or facial scan fails, you can always fall back on your PIN. Some computers may also include an option to enable some other biometric form of Hello, like a fingerprint (if you have a reader), or facial recognition (like my Surface Pro, using a built-in infrared camera). That PIN is tied to your specific TPM chip & device. The key requirement for Hello is that you first choose a “PIN” instead of a password. What is happening here is actually pretty great, because no credentials are passed over a wire–Hello takes place completely within your device–your unique “Hello” to Windows depends on that specific piece of hardware as well as the personalized “Hello” that you have configured. Windows Hello leverages this chip during the logon process. This is a special piece of hardware on your motherboard that stores cryptographic information, and is unique to your device. Many modern systems come with a Trusted Platform Module (TPM) chip. But it’s really just extra security in disguise. The marketing around this sells it as a more “personalized” login experience–more “human” or whatever. Windows 10 introduced a new security feature called “ Hello,” which allows a computer to be unlocked via different means than a traditional username/password prompt.

Windows hello intune